Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/WBCVlwzLFIhpHmikKSGmFT5k34E.roa
File: WBCVlwzLFIhpHmikKSGmFT5k34E.roa (raw, json)
Hash identifier: pTEKKZQcHFIJ30q9wweB+zV2ldm9D/0jG3wicKLm+pw=
Subject key identifier: 58:10:95:97:0C:CB:14:88:69:1E:68:A4:29:21:A6:15:3E:64:DF:81
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018EA91F735F986C755AC86D78AF53776416
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/WBCVlwzLFIhpHmikKSGmFT5k34E.roa
Signing time: Thu 04 Apr 2024 12:39:54 +0000
ROA not before: Thu 04 Apr 2024 12:39:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215240
IP address blocks: 45.8.92.0/24 maxlen: 24
93.123.39.0/24 maxlen: 24
94.156.8.0/24 maxlen: 24
94.156.79.0/24 maxlen: 24
147.78.103.0/24 maxlen: 24
185.216.70.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 06 Apr 2024 14:18:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a9:1f:73:5f:98:6c:75:5a:c8:6d:78:af:53:77:64:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 4 12:39:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=581095970ccb1488691e68a42921a6153e64df81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:18:00:df:f1:e6:a7:82:c6:c0:cb:65:69:af:
d2:bc:1f:94:dd:15:2e:83:33:88:7f:30:8e:5f:dd:
85:78:2b:bd:86:13:ba:66:a5:e0:c7:b4:d9:82:f3:
15:09:a9:ca:1a:d4:b9:af:e7:b6:6c:a9:d2:b6:e7:
4b:eb:73:22:48:c4:2b:bb:1d:0c:6b:a0:66:0f:76:
55:58:3c:29:be:16:8d:cb:75:0d:52:ba:c0:c4:c4:
85:3d:43:77:7a:50:4b:18:93:c5:7d:e3:be:fb:6b:
af:2c:33:e4:88:98:29:04:9a:d2:f2:df:08:98:e6:
aa:bb:d0:f1:d8:00:13:f2:4a:8f:1b:3d:4b:ef:6c:
06:90:54:29:fb:bc:98:9e:15:4c:8e:fd:26:69:a5:
74:f0:ac:cd:fe:17:8d:96:51:f7:3a:d0:6f:87:61:
ed:3d:29:c5:61:1a:22:e5:35:74:a0:ff:c9:29:d5:
4e:ec:83:d9:c1:71:d8:de:4d:ed:b0:d9:65:ad:d8:
6b:c8:cb:23:f7:f8:fe:88:1b:19:71:5e:f8:e1:3c:
8e:e1:c0:60:5d:36:f8:dd:98:1a:3e:5d:f1:bc:19:
5e:dc:41:0b:ea:ce:b4:26:c8:cc:bf:72:f8:d6:5a:
34:22:f5:04:0f:1d:47:ed:75:ea:ce:3d:6d:a0:09:
19:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:10:95:97:0C:CB:14:88:69:1E:68:A4:29:21:A6:15:3E:64:DF:81
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/WBCVlwzLFIhpHmikKSGmFT5k34E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.92.0/24
93.123.39.0/24
94.156.8.0/24
94.156.79.0/24
147.78.103.0/24
185.216.70.0/24
Signature Algorithm: sha256WithRSAEncryption
95:09:00:3c:ee:e6:b7:16:8c:a2:70:0d:60:2c:67:29:b8:38:
22:b8:4e:7f:d6:57:cb:db:0f:ff:c0:25:4e:59:ba:35:13:7c:
54:80:63:8f:58:96:1b:be:33:aa:ac:c5:0a:0b:5e:98:f2:f7:
13:41:ef:0c:79:10:09:e6:dd:3e:1e:64:b6:c2:17:6e:ef:69:
99:b0:2b:b3:db:1f:8d:d5:6a:25:03:0b:47:5d:31:58:8b:87:
be:91:a4:0a:47:9b:92:da:5d:44:05:48:e4:a0:fb:93:25:94:
a3:73:d2:7f:2c:5d:ed:56:ac:3c:ea:d7:e9:e0:28:4f:be:de:
fb:ff:d3:63:04:9d:dd:96:bf:9f:54:37:e9:a4:ae:72:4d:d0:
bc:a3:78:29:0a:d2:ab:c8:bd:22:3a:e7:ba:3c:ec:6c:ed:83:
22:4d:69:46:f2:eb:19:d4:e3:c3:0b:38:eb:3e:b2:54:ba:48:
2a:8c:25:d8:cc:97:53:04:95:e7:3c:41:fb:2f:09:9f:0b:ba:
7f:bb:e2:6d:6b:a0:c1:e7:f2:08:f6:f5:01:1f:ff:02:05:27:
2e:38:54:3b:43:97:1a:4d:80:39:a3:3b:ed:36:ee:21:6a:ee:
70:84:7a:1e:63:4b:48:31:1e:f5:b0:2b:b4:fa:5a:ba:2c:55:
74:2b:96:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:12 2024 by rpki-client on console-fra.rpki-client.org